Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oX1HbGWrcFUiYi3rkicGK5IOpzM.roa
File: oX1HbGWrcFUiYi3rkicGK5IOpzM.roa (raw, json)
Hash identifier: UnHm1aD72RiUzUxY1+q1uvhCRI3HGddzoiwsQnFrJ7s=
Subject key identifier: A1:7D:47:6C:65:AB:70:55:22:62:2D:EB:92:27:06:2B:92:0E:A7:33
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D860FBF80D5F16060F05605632E9659C5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oX1HbGWrcFUiYi3rkicGK5IOpzM.roa
Signing time: Thu 08 Feb 2024 00:13:15 +0000
ROA not before: Thu 08 Feb 2024 00:13:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:86:0f:bf:80:d5:f1:60:60:f0:56:05:63:2e:96:59:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 8 00:13:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a17d476c65ab705522622deb9227062b920ea733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:e9:26:56:0c:c7:4f:75:5c:69:df:0f:93:
0c:6d:43:07:f5:98:2e:28:a8:5a:d3:24:8d:51:59:
0e:d9:89:a8:96:60:22:88:67:17:c8:e3:c0:46:19:
06:f4:06:96:79:55:59:66:2e:63:54:cd:eb:82:7a:
eb:aa:8c:59:0a:8c:74:05:e7:51:3d:4e:55:b7:b1:
fc:37:ca:b2:32:e3:86:dd:f8:77:08:1c:8e:e5:1a:
38:eb:62:ca:3a:d8:61:df:ce:f6:30:61:53:be:31:
4f:3c:84:22:71:4a:07:13:29:fd:88:68:e9:75:dc:
93:b3:a6:76:d3:f4:bd:94:c7:56:c0:de:50:4b:8f:
29:a3:ee:16:d8:d6:16:2d:9b:de:68:13:49:30:9b:
7a:96:e8:b6:a4:ab:9b:49:e4:b2:9a:24:8b:f2:f6:
c9:b1:43:28:90:64:74:d7:66:65:5d:30:14:38:14:
bc:d6:7b:a7:b9:a9:98:5e:f5:ac:9c:fc:ea:13:ee:
28:df:b8:88:73:5a:42:51:c2:eb:5d:d9:e9:0d:93:
20:0b:60:ef:d3:98:5f:cc:01:ab:e0:a6:3b:40:2f:
42:64:c7:8e:18:c5:e0:55:94:3d:bc:e9:f9:81:f1:
25:38:e5:49:9a:aa:a4:df:12:c7:5a:f3:8a:93:92:
47:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7D:47:6C:65:AB:70:55:22:62:2D:EB:92:27:06:2B:92:0E:A7:33
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/oX1HbGWrcFUiYi3rkicGK5IOpzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:76:d9:4b:11:d8:da:b8:d2:ee:75:7c:fa:39:30:5b:0a:94:
a6:4c:07:94:a5:1d:28:05:70:f9:99:2b:82:1a:31:69:36:fa:
af:ff:80:aa:c7:c1:57:34:64:c8:f7:90:40:d9:09:bc:9e:94:
8c:2b:94:5c:ca:f6:ba:a9:30:e8:f2:70:9a:84:fa:69:1a:b5:
a7:b1:68:24:2d:1e:4c:37:61:36:eb:dd:ae:af:15:ab:09:af:
5a:17:ef:ae:b9:22:bc:27:95:dc:38:fb:cc:bc:a8:6d:fb:0a:
a0:31:9d:cf:93:cd:cd:5d:72:ba:76:59:43:84:7c:dc:50:68:
05:96:da:ef:1c:f5:b4:02:f7:bb:e0:a7:e8:2b:5a:db:b0:d6:
f1:ce:fd:80:5d:0f:6a:4e:73:ec:e1:d2:5d:15:50:c0:fd:88:
e3:1e:e3:49:a3:24:ff:dd:f5:f6:4b:b9:2c:f2:4b:3d:73:3d:
b4:83:dc:25:8f:f7:80:a3:55:ac:60:1b:ed:5e:1f:ef:64:bd:
e0:6a:82:1a:6e:a6:61:7f:2d:17:70:d6:4b:92:54:c8:03:f0:
86:86:34:06:b7:c6:89:6e:76:77:9f:6b:59:b5:f6:59:c5:7f:
20:b6:3d:d0:31:05:1b:2e:b6:a7:83:5f:1f:18:16:59:63:8b:
bd:68:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-fra.rpki-client.org